summaryrefslogtreecommitdiff
path: root/libs/binder
AgeCommit message (Collapse)Author
2025-09-18[SP 2025-09-01] RPC Binder: clearer errors for wrong transact type Steven Moreland
Bug: 423127919 # this bug error is totally different than this case. If we hit this case, we would have gotten a different harder error. However, I found this while looking at this bug. Bug: 416734088 Test: binderRpcTest Flag: EXEMPT bug fix Change-Id: I3e0db452ebeed1a520ffc0181ed3577eb38bea9a Merged-In: I3e0db452ebeed1a520ffc0181ed3577eb38bea9a (cherry picked from commit 51ed14eebf5a6b7e0d1d6f5b9c81b01a666b270a)
2025-09-18[SP 2025-09-01] RPC Binder: shutdown on SPAN error. Steven Moreland
This error return is not recoverable. Bug: 416734088 Test: binderRpcTest Change-Id: If0b8a8f36f797dcf927bfc2b5ae51e37e915f2f6 Merged-In: If0b8a8f36f797dcf927bfc2b5ae51e37e915f2f6 (cherry picked from commit dddbc115f88d99379ad9e118e551924c84f16e3a)
2025-09-18[SP 2025-09-01] RPC Binder: shutdown on ENOMEM Steven Moreland
We were expecting crashes in these case, but explicitly shut down. More work needs to be done to ignore transactions in out of memory conditions. Bug: 404210068 Bug: 414720799 Bug: 416734088 Test: binderRpcTest Change-Id: Iaf9a34b4031fb7b9807c962bcc67de8cd9102088 Merged-In: Iaf9a34b4031fb7b9807c962bcc67de8cd9102088 (cherry picked from commit cba4e3642a8a58d54481ed4c14f179bcc7f9ae70)
2025-09-18[SP 2025-09-01] Protect objects in Parcel::appendFrom Devin Moore
* only aquire objects within the range supplied to appendFrom * don't append over existing objects * unset the mObjectsSorted flag a couple more cases * keep mObjectPositions sorted Flag: EXEMPT bug fix Ignore-AOSP-First: security fix Test: binder_parcel_fuzzer Bug: 402319736 Change-Id: I63715fdd81781aaf04f5fc0cb8bdb74c09d5d807 (cherry picked from commit 28e7af08b92e7b97f46d8ecd88ebd3f27a065e08)
2025-03-20Merge "Check mDataPos to see if the Parcel needs to grow" into main Treehugger Robot
2025-03-19Check mDataPos to see if the Parcel needs to grow Devin Moore
Flag: EXEMPT bug fix Ignore-AOSP-First: security fix Test: atest binderUnitTest Bug: 399155883 Change-Id: I38b755ca3381cfca3300292873f763823fbf169b
2025-03-18Merge "Add comment explaining BpBinder::linkToDeath invalid operation" into ↵ Treehugger Robot
main am: 4212ea291e am: 93806e1a53 Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3524953 Change-Id: Idd2ba75fed12813dd397d8d1da2ef67f40f5d977 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-03-18Merge "binderRpcTest: Fix sockaddr_storage handling" into main Devin Moore
2025-03-18Merge "Add comment explaining BpBinder::linkToDeath invalid operation" into main Treehugger Robot
2025-03-17Merge "libbinder: fix trusty cpp fd transport modes" into main am: ↵ Treehugger Robot
33da0c2368 am: 3ea3bd3ec2 Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3547982 Change-Id: Ic37d6529d7060d0bc4982c7b88e5948d8eb34241 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-03-17Merge "libbinder: fix trusty cpp fd transport modes" into main Treehugger Robot
2025-03-17libbinder: fix trusty cpp fd transport modes Gil Cukierman
This moves the call to set allowed file descriptor transport modes to a common method that is invoked on both cpp and rust construction of RpcServerTrusty objects. Test: atest -c frameworks/native/libs/binder/tests/ Bug: 393346719 Change-Id: I0ec04676ff36879ce2b40f5070214b1cbe21f2b0
2025-03-14Merge "Implement Send for RpcServerConnection" into main am: c643576c05 am: ↵ Hasini Gunasinghe
22795fe48f Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3398707 Change-Id: I980c90b1f974c4b7d953611b7ab58ffe549c40db Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-03-14Merge "Implement Send for RpcServerConnection" into main Hasini Gunasinghe
2025-03-14Merge "Add get() method to declare_binder_enum" into main am: 0fa903349f am: ↵ Treehugger Robot
709de11f8a Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3483296 Change-Id: I4909414908686a9daf66617209fb844a5e8d8f94 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-03-14Merge "Add get() method to declare_binder_enum" into main Treehugger Robot
2025-03-13Merge "libbinder: export fewer symbols for vendor builds" into main am: ↵ Frederick Mayle
cce29be72c am: dd1edea9fb Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3534100 Change-Id: I83f9cadfddebb217b3bb6bdf3fa0cf3643245a0d Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-03-13Merge "libbinder: export fewer symbols for vendor builds" into main Frederick Mayle
2025-03-12Merge "Export RpcServerConnection for use in Trusty" into main am: ↵ Hasini Gunasinghe
a4a2dd9bc2 am: 5415544312 Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3369320 Change-Id: I815764d4d6ea066fd51fd2d9f444be01def53723 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-03-12Merge "Export RpcServerConnection for use in Trusty" into main Hasini Gunasinghe
2025-03-12Implement Send for RpcServerConnection Hasini Gunasinghe
Test: N/A Bug: 382291660 Change-Id: I0e5fbede384c67439d54c7b8f53ae8622886f704
2025-03-10libbinder: export fewer symbols for vendor builds Frederick Mayle
See https://r.android.com/3087749 for details. This commit brings the vendor build to parity with the other builds. It may cause some initial issues for vendors, but that should be more than compensated by the ongoing issues it will fix for them. For example, when backporting security fixes, we'd often see ABI breakages because the set of internal symbols might change (before this commit we'd be exporting all internal symbols). That should never happen after this change. Bug: 338458975 Bug: 349657329 Test: m Change-Id: I5f77a8d1e16d38c5e83f9b8842368a967b4ee229
2025-03-10Merge "Remove log if cache is disabled." into main am: 67b445a490 am: 608f314552 Treehugger Robot
Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3505695 Change-Id: Ib7c3aee6f36ad2a077c4b862412fe6ac8490288e Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-03-10Merge "Remove log if cache is disabled." into main am: 67b445a490 Treehugger Robot
Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3505695 Change-Id: I80e619cb16d31d4c80e329bc8240501af1df3ffc Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-03-10Merge "Merge 25Q1 (ab/BP1A.250305.020) to AOSP main" into main Xin Li
2025-03-10Merge "Remove log if cache is disabled." into main Treehugger Robot
2025-03-10Remove log if cache is disabled. Parth Sane
Change-Id: I8d419df56e22b7a334f419a58724d4144efc86f3 Flag: Bugfix Bug: 399202756 Test: N/A
2025-03-08Export RpcServerConnection for use in Trusty Hasini Gunasinghe
Dependent CL/code: https://android-review.git.corp.google.com/c/trusty/app/authmgr/+/3342621/2/authmgr-be/lib/src/server.rs#28 Test: compile in Trusty Bug: 369145005 Change-Id: I70cd4bb8f2b2747d61a4c59749c664c39e43b259
2025-03-07binderRpcTest: Fix sockaddr_storage handling Devin Moore
sockaddr_storage can be larger than any of the sockaddr_* types, so we need to copy the smaller types into the possibly larger type safely. Ignore-AOSP-First: memory safety Flag: TEST_ONLY Test: atets binderRpcTest Bug: 376876391 Change-Id: Idb83098afb310321f92d3f3ab78f7967fa1207d9
2025-03-07Merge "libbinder: allow fd transport in trusty by default" into main am: ↵ Gil Cukierman
4b89f17ef1 am: cadcf50fd8 Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3503637 Change-Id: Id7c3fe4b90270da223854b6d5044a7d07af5d555 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-03-07Merge "libbinder: allow fd transport in trusty by default" into main am: ↵ Gil Cukierman
4b89f17ef1 Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3503637 Change-Id: I1d2460cae9ec6224e496ef10d7271f71d3ce2db2 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-03-07Merge "libbinder: allow fd transport in trusty by default" into main Gil Cukierman
2025-03-05Merge "Support deleting param for preconnected sessions" into main am: ↵ Treehugger Robot
1175227bef am: e713cc1378 Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3515750 Change-Id: I398ebd33d708db1a79fae2980e9317ab80cfa65c Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-03-05Merge "Support deleting param for preconnected sessions" into main am: ↵ Treehugger Robot
1175227bef Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3515750 Change-Id: I95842bbdca78b91195ea1a0fa85d00d17db91acd Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-03-05Merge "Support deleting param for preconnected sessions" into main Treehugger Robot
2025-03-05Support deleting param for preconnected sessions Inseob Kim
Although we can pass arbitrary pointers to setup preconnected clients, the lifetime isn't clear and it's very easy to make UAF bugs. To prevent UAF, an additional function can be passed to delete param when param is no longer required, effectively transferring the ownership of param to RPC session. Bug: 398890208 Test: atest MicrodroidTests Change-Id: I1a1c149a56876f56fba81b89cdc90ee372d2d7fe
2025-03-04Add comment explaining BpBinder::linkToDeath invalid operation Devin Moore
Test: none Bug: none Change-Id: I5e55018314079b895084d2ae06a197b9d9e54480
2025-03-03Merge "Add meta transactions in fuzzService" into main am: 6dfc509ab2 am: ↵ Treehugger Robot
6724137cda Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3508834 Change-Id: I87900f441471b9d7d6eeab323053a53716fedd5a Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-03-03Merge "Add meta transactions in fuzzService" into main am: 6dfc509ab2 Treehugger Robot
Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3508834 Change-Id: I5edc07bf0d0d15d0f9575717382f139cdea00520 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-03-03Merge "Add meta transactions in fuzzService" into main Treehugger Robot
2025-03-03Add meta transactions in fuzzService Pawan Wagh
Test: atest fuzz_service_test Bug: 295942369 Change-Id: Iab3918371a415afc489b55997257d3ed9b9e5651
2025-02-27Merge "Merge 25Q1 (ab/12770256) to aosp-main-future" into aosp-main-future Xin Li
2025-02-26Merge "libbinder: Send ancillary FDs to Trusty" into main am: 4a4e0dded0 am: ↵ Treehugger Robot
72782217ce Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3011994 Change-Id: I46a3683cf425684adb7f7ec27dbc5907a611d4d7 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-02-26Merge "libbinder: Send ancillary FDs to Trusty" into main Treehugger Robot
2025-02-27libbinder: Send ancillary FDs to Trusty Dmitriy Filchenko
Bug: 319300676 Test: atest binderRpcToTrustyTest Change-Id: Idbfcae0b2ff3c945b156aba1612c0d394f60386b
2025-02-26Merge "modifying libbinder_trusty visibility" into main am: 547ae00322 am: ↵ Orlando Arbildo
18a8acef9f Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3503280 Change-Id: I0c4a3669368f6059c3df18bcc8c2132194c24fd1 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
2025-02-26Merge "modifying libbinder_trusty visibility" into main Orlando Arbildo
2025-02-26libbinder: allow fd transport in trusty by default Gil Cukierman
Changes the default protocol version of 0 for trusty servers and keeps them in line with the latest stable RPC_WIRE_PROTOCOL_VERSION (currently 1). It seems that hardcoding to version 0 happened before aosp/2534786 where RPC_WIRE_PROTOCOL_VERSION_EXPERIMENTAL was the default. Version 1 allows parcels to contain FDs. This should be safe because rpc binder negotiates a protocol version using the min value of the client and server configurations. Older clients will be able to downgrade the protocol version (but not transact with fds in their parcels) and newer clients will see their protocol versions negotiated down to the server's version on connection. This change also adds supported file descriptor transport modes to servers by default. In trusty, tipc allows handles to be transmitted by default so this is in line with the current security posture. Bug: 377907450 Test: trusty/vendor/google/aosp/scripts/build.py \ --test "boot-test:com.android.trusty.binderRpcTest" \ qemu-generic-arm64-test-debug Test: trusty/vendor/google/aosp/scripts/build.py qemu-generic-arm64-test-debug \ --test="boot-test:com.android.trusty.rust.service_manager_tests.test Change-Id: I0efbd7781f0fd2bc81981b01ae1b1d0d149b12b6
2025-02-26Merge 25Q1 (ab/12770256) to aosp-main-future Xin Li
Bug: 385190204 Merged-In: I0fb567cbcca67a2fc6c088f652c8af570b8d7e53 Change-Id: Iaae8cd491ff963cf422f4b19c54be33e1244a9a1
2025-02-24Merge "[owners] Remove svetoslavganov@google.com from ↵ Patrick Baumann
libs/binder/aidl/android/content/pm/OWNERS" into main am: 206749cc0d am: ea54230ec4 Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/3506612 Change-Id: Ic55ac3f20e7df46195a0c396a9270de9db6f59af Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
generated by cgit v1.2.3-59-g8ed1b (git 2.39.0) at 2025-10-19 21:43:52 +0000